Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/bacb2d72-f3bd-3d87-8a70-b60e2a3e71e6.roa
File:                     bacb2d72-f3bd-3d87-8a70-b60e2a3e71e6.roa (raw, json)
Hash identifier:          R6o9aBGfmQPk6hYbIHcOvvhbgRjS8J4ObmmcxFFlrWo=
Subject key identifier:   15:6C:FE:8C:0D:6C:2C:25:65:90:71:FB:86:06:65:30:EC:2F:C5:C2
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584453DEE622561BD8FAF6B41DA0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/bacb2d72-f3bd-3d87-8a70-b60e2a3e71e6.roa
Signing time:             Mon 25 Dec 2023 02:00:15 +0000
ROA not before:           Mon 25 Dec 2023 02:00:15 +0000
ROA not after:            Sun 24 Mar 2024 01:00:15 +0000
asID:                     109
IP address blocks:        173.36.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:53:de:e6:22:56:1b:d8:fa:f6:b4:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Dec 25 02:00:15 2023 GMT
            Not After : Mar 24 01:00:15 2024 GMT
        Subject: CN=50a231d6-4395-4631-b1ae-b9cebb0ad542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:f7:28:f6:2d:0c:56:08:66:96:6d:c5:c2:
                    0d:10:47:74:5b:da:44:b4:d7:25:2d:d8:4f:07:4f:
                    fb:cc:a5:fd:a8:a3:e0:60:1b:8e:39:81:87:b5:e0:
                    8d:72:50:37:39:20:e0:06:65:f7:a4:4b:93:8e:0a:
                    d9:64:d5:b0:63:21:69:dc:a4:f0:b1:2b:50:57:15:
                    93:d3:60:7f:1a:0c:cd:8e:7c:a6:fd:cd:ab:77:e9:
                    d5:1a:32:4a:b7:46:db:84:61:31:08:a6:be:eb:b4:
                    46:2e:27:a7:0c:20:04:4e:20:2f:ad:0e:07:f5:96:
                    e7:9c:86:25:ff:6c:ac:b5:6d:8e:ea:69:83:69:9f:
                    5c:d6:7e:04:4c:d3:34:70:e2:b3:a3:60:55:95:f9:
                    08:90:3e:d6:75:f8:a2:c0:c8:8f:8e:53:78:17:12:
                    d0:c6:86:c7:a5:31:52:02:d6:a2:1c:6b:9d:77:92:
                    6e:68:ef:44:30:ce:f7:12:13:64:8a:c0:3a:c1:be:
                    26:6d:a1:5e:3c:48:93:1b:2f:f9:d2:37:7c:cb:9a:
                    a6:ae:1f:a1:3b:28:f0:ae:65:e4:6e:85:c2:2c:fe:
                    67:80:c1:3e:11:f1:12:78:f8:bd:1e:e5:1c:22:5b:
                    47:3a:b6:a3:a5:6b:6c:38:8a:b1:16:25:cc:3d:1d:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:FE:8C:0D:6C:2C:25:65:90:71:FB:86:06:65:30:EC:2F:C5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/bacb2d72-f3bd-3d87-8a70-b60e2a3e71e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:49:30:73:a5:20:96:4f:e9:d0:cd:48:a3:f7:52:6d:8e:f9:
         c7:4a:c3:7d:a4:43:ee:be:0c:b1:2c:97:50:b1:4b:00:de:6b:
         e7:48:a5:79:1e:9f:56:61:f8:73:7f:a2:a3:3c:00:a1:46:de:
         78:48:de:a1:fa:3e:c2:de:e5:22:f2:c8:ba:62:0f:3d:75:26:
         69:32:90:b3:a0:35:ec:59:56:03:6e:39:79:60:4f:8c:c6:93:
         5c:e3:e9:62:24:95:51:c6:58:4b:c9:ad:33:38:cf:81:b7:e5:
         92:9a:7d:2f:96:9d:08:c2:2f:95:96:7b:31:ef:c5:3d:f4:d2:
         c3:74:23:0a:46:fc:d4:cf:8f:7d:ff:3d:88:14:6e:54:39:bb:
         c3:9b:23:c8:93:cd:29:1b:87:a8:e8:a3:0e:1a:91:ab:c6:31:
         e1:69:f7:dc:36:5b:d8:f4:41:76:31:e4:71:1c:88:7a:82:25:
         c6:f2:14:b2:51:ba:85:d6:55:eb:94:ff:1c:00:a4:84:8a:7e:
         5b:54:4e:c7:6e:6d:67:e3:4e:91:1f:e1:32:5a:c2:93:15:bc:
         89:f1:70:fc:72:35:16:18:b3:88:ee:9b:ed:fe:e0:83:79:2b:
         b6:14:fc:4e:61:c4:a8:3d:61:5c:a3:8d:15:f9:9d:86:d4:c2:
         28:5a:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----